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£J§v\ v = F (g, -s) £^&iT^£-#faffiKj&F#5gi&e>*i 

£&lc o vat ©IE^1£ &te§E -T £ =l - -VMUJimr* & o X , 
t&iHiiEW#filSettSL»a ££j&U flif#A = B8£fcF (g, a) 

^ a & ^iiE##i^a (c mm l . 
mmtkmmmmmitzimb &£j*u ^B=mm.F (g, b) nm^x=m 

«F (A, b) ^B£#B, X&3EIJ§#fl033S«tcaMgU 

l&fBSEI£#««te, H|p-^X = BliS[F (B, a) ©M#0/ifcS£tt&|ft5EU f& 
±£tZ>htkU\stck.i*K^ SL»c&£j*U H£^C=W»F (g, c) fctflfc^ 
Y=TOF (B, c) *fcliHgF#C = W»F (A, c) ^W#Y = 59iS[F 

(X, c) fc, l£#Z=WffcH (a, Y, s) t£#»t# £MSE#i»J=g| 

s&ta^M«!iisatiBf#Y = Be^F (c, b) &«#A = gg$:J (v, y, 
[»#^2] ( q i p-D ©w^&isfc-rasascp, $lwl<kdk* 

v = F (g, — s)=g mod p 

<d mm * m •* z z. t * mm t. -t z r t & t -t & m i <» =l - if uuism. 

X = B mod p 
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H (a, Y, s) = a+ Ys mod q 

(D m& & m -r s z 1 & mm t. -t & z. t zn&m t -t & m #m 1 0 =l - sse^Ss. 

J ( v, Y, g, Z) = v Y g Z mod p 

tofcm&8*m\>K v = F (g, -s) ;frl3M£W«F#j£i&p>ti 
fc o v a T © IE ^ ft & ? "5 a. - if fgSE© to ©SEE #{H!ll£«ffl ^ □ ^ 9 A £ 

SUR a Hi#A = H^F (g, a) KH£#A£&II# 

SteStlfcBf-^B, XlCX^T, H£#X = B8#F (B, a) ©K£&©/&Altt 
&tfcSE3-£\ JERSti-S^tftSEStifcfc^lc, SLgfc c lfc-SC = W8tF 

(g, c) &0PHgP#Y=B5»F (B, c) fc, ££tiHi#C = |i8ffcF (A, c) 

&tfHif#Y = i»!fcF (x, c) fc, m^z=mmn (a, Y, s) fc 

»fefiE«g&Mw v = f ( g> -s) zmfc.?'<g-'ijfa&mmFtffei>bt>ti 
s» o i&iattSE#^« tc v ^ t ss »j nr IB * ga® «sc# *> o t , iff t b^se 
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»f ( g , b) tm-%x=mmF (a, b) *mb, xzummmm 
mzmmtm:. 

mmummmmmfrib<Dm^c=mmF (g, c> y=w»f cb, 

c) fc, £fcttl«-^C = W«F (A, c) &tfffiF#Y = W«F (X, c) Off 
#Z=K!&H (a, Y, s) £ £^f§£i±, 

^M£*l£f^C. Y, ZlC«o*^T, Bt#Y = BBiKF (C, b) &tW#A 

=mmj (v, y, g, z) <D2-D(Dm&t>mmzf&&Lf~£giz, mmtku^ 

AfcfiEftg&Mv^ v = f (g, -s) &»fc^£-;£ftttW»F#3£«>e>*i 
& \z o V \ T © IE m 'ft £ &3E -T £ ^- - if SSSE © to © H m JB © 3. - if UsSE 

SLIfca &£j*L**olirSA = W»CF <g, a) 3fc#>fcfli-if A £^§E# 

tc sn§ t & mm^m t , 

g«3tlfcH|P#B, XlCSo'VNT, Bg#X = WI&F (B, a) ©M^<7) 

t^fi!Wfc"r<5i:&3E3*ifcfc£K:, SLRcfc^jSLfro, h£#C = |»$:f (g 
, c) &Uf|©#Y=W»F (B, c) £fcttl«#C=W»F (A, c) &t>* 
B£#Y=Wi£F (X, c) £ y «ffZ=B8»H (a, Y, s) £&#«>.&l£#SI 

fffiBBt-^c, y, zzwat&mmmizmm-rzm^mm^mt:. 

$e0^#m^bm © n - if Mumm. 
m&mi o] sE9!#«iSiB©^iw«t v tu&ms £.<DMmz-D^x^&> 
%.sbt~mmg*m\<\ v = f ( g , - s ) zmt~-t #fiM$»»F#)£tf>e> 
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mmz o vn t (Die ^tt z&m. -t z> - if mu<d t=. » © n - -tf gg 

§URb &&«ba3«fctf£te3*lfelfc#AK:2S^T, Hf#B = 
S8I&F (g, b) «#X = W$tF (A, b) &*#>T. KHT^B, X£fEI£# 

{lis* c mm-t z mm^m t. , 

l«3BliEre#iWiS«*^©ffiP#C=BBjRF (g, c) Y = Bgi&F (B, 

c) n % ±t^m^c=mmF (a, c > =mmF ex, c > ^, m 

#z=@5i$ch (a, y, s) t z^m-tzm^^m^mt. 
gmzn^m^c. y, ztcs-^r, Bg#Y = ggifcF (c, b) &t>*if#A 

= KtfcJ (v, Y, g, Z) ©2^3<Z)BB«*^^rJCfifciiLfet^tc, Ifrffi*fe3£# 

«»©»#3U 0{cfB«®^iE#{WI^gM©rL-if^!|iES«i:, 
•& tf =l - if 3S3£ */ 7s -f- A o 

Sftfelltg 5:Mv\ v = F (g, -s) #l3M$W»F#j£g>& 

Hft IZ -d V \ T <D IE Sffi £ ^SE f * 3. - -ifSKSE */ X -r- A IC £ V * T , 

a»a&4«l^ol«#A = |»»F (g, a) ^fefeBf# A £1££E# 

iff Ian bvm^Az&m-rz mummmnm %m^m t , 

ft»b&£j£U Bf^B=gSmF (g, b) hSg#X = gg^F (A, b) 
«>, i£Rf^B, X&|iE^#{R!l^glC^Mi-^^liE#{a!ligeMizlM#ISi:, 

g^Stl^B, XtC^o'VAT. B£#X = 3B£fcF (B, a) OiifflJ^fifi 
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, c) &tfflg#Y=gB£fcF ( B , c) £fcl*m^C=mmF (A, c) Jktf 
BgP#Y = g|f5CF (X, c) lfc^Z=BS&H (a, Y, s) SI£f8 # 

m^Y=mmF <c, b> Mm^A=mmj (v, y, g , z> 02o©» 

[0 0 0 1] 

t>*rL--ff^iiE^^^A{c^^u, m\z. 'p&< £&&mmtfmfe2tir=.um#m 

[0 0 0 2] 

if^lI^^ST'fe^o :i— if&SEfcii, fa<b^tf):/n hi2;wcj; *J, SEtfl##e 

#<z>#*; & &5E# jc*f l r sew s i i? * »; , «^-si3t 5 1 £ z <D#m tc & ^ t 
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, ^mmm^m^^x^v. ummit^mmtm^m^mw^xi3^. uwm 

[0 0 0 3] 

3(Z)^.-if^$E©^W^^i: IT, Schnorr©:£&##jib;fiT^£ (C. P. 
Schnorr, "Ef f icientSignature Generation by Smart Cards," Journal of Cryp 
tology, Vol.4, No. 3, pp. 161-174, 1991. „ Z.(D&ffiXiZ. Um&lZ&M. 

-^u^m^vx^^. 

[0 0 0 4] 

fc&<D&ffi<D—Wt. l/T, ©Schnorr© n- if fgIE:£i£&Co V^^CDfl^fc 

q USU q I P - 1 ) fiiq©SgEZpt*fe5 c £ IE0J!#tf)£ilM 
te, v (-fib, v = g~ s mod p) fEB^#CDMIIl±, sGZqt'fe 

iillStP, q, &tfn;g*>^#)Ifc#LTV^t;tf)£: U ^liE#liliE0^#©^^liv 

[0 0 0 5] 

A=g a mod p 
£fffTU ^SE#JCM^§ 0 
*TV72 &£E#&SUfcb (bGZq) &£j£U 

c=a+bs mod q 
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a be , 
A=v g mod p 

[0 0 0 6] 

r^SPflff-rJSi*)^^.— !f3g|E©^ttK:ov^T, **H9M£ 
JCgS^S&ffirtfJ: <#I£4XT^<5 (S. Goldwasser, S. Micali, and C. Rackoff 
, "The Knowledge Complexity of Interactive Proofs," Proceedings of 17th 
synposium on Theory of Computing, pp. 291-304, 1985. . ^ftlM'&.lt. 

[0 0 0 7] 

_hga©Schnorr©gg|E*ig^ti % -B&BIE? 2> 3 £. T?**H3iH£ Z> Z £ 
&C&<5 (A. Fiat and A.Shamir, "How to prove yourself: practical solution 
to identification and signature problems," Proceedings of Crypto' 86, 19 
80. . Mfldfticte, &H#{Cj:SSLt&£be {0, 1} tbT4^U ^ 
nt>n;i/£0 (log q ) m, Z/ — >r > Z/ v n/izM4f~? Z> £ o lz^JE~ttHt. 
*&»t£&i»fc^££^illiS*vr^5. ir&fc^, «T©^Dhn;i/?:0 (1 

og q) o^u :£T<z>Ji*fic£^T, £Hi##^3i-r **$wtc 

& fSSE-r 3 * T* & 5 . 
[0 0 0 8] 

C^n hu;i/] 
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A = g 3 mod p 



7, -r y -7 2 



$tU#teSLtfcbe {0, 1} &£j£U 



* -r y >f 3 



c = a + b s mod q 



a be , 
A = v g mod p 



[0 0 0 9] 

^cd^ic jumasmo <iog q) izmM-?z>t>\ mtammz&uzti 

[0 0 10] 

3E&&^ (C. Dwork, M. Naor and A. Sahai, "Concurrent Zero-Knowledge, " 
Proc. Of 30 th STOC, 1998. . 
[0011] 

Z>W>&rf$>Z> a WWW (World Wide Web:r7-;i/K • CM K • tfx^) H 
TTP (Hypertext Transfer Protocol :WWW-tr-A- i: WWW:/^ ^If^Web:/^ ? 
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[0012] 
[0013] 

m&Ki^X^thfetht=.m.WLg%:m^. v = F (g, -s) ^mt=.t^-i3H 

gB!It»#flHg*ttSL«a &4^U HT5A = W«F (g, a) ^H|f#A 
£&I£#^Sfc^U taia^H#M^SimtS:b Hir# B = MWC F 

(g, b) £&ir#x=i»f$cF (a, b) mm^B, xzmwmwmmiz 

U ^t-^h^ULfeii^lc, SL$fcc&£f&U Bf#C = B9fSCF (g, c) & 

z$m^Y=mm.F (b, c > t, £ju«-^c=Mf$:F ca, c) ^m^Y = 
mmF ex, c ) m^z=mmn (a, y, s ) m&m^z*kM 
^mmmzmmb. mm^mmmmmi l tm^Y=mmF cc, b) &w#a = 

W8J (v, Y, g, Z) ©2ocDg§^#|wmcj&£L£££{C, MfS^IE#{ll 

§ss t m i ^bie0^#m^«o m# #ie ^ t* & s £ f £ z n & mm. £ ? z> = 

[0014] 

(q I P-i) <z>m&zmr^mmv, q£> te^q^sriytasi^g tit 

[0 0 15] 
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v = F (g, -s) = g 



-s 



mod p 



[0 0 16] 



X = B mod p 



<D &&&&& U tc £ £ ICSLifc c £ tefitt Z> Z £ £ #*gt £ i~ 3 . 

H (a, Y, s) = a+ Ys mod q 
a> m& £ M t 6 Z. £ £ #M £ -r Z> „ 

J (v, Y, g, Z) =v Y g Z mod p 

© §§e& & q£ -r s 3 1 mm £ -r * . 

[0 0 17] 

£«>fcfi«g&JBV\ v = F (g, -s) feffifc-T^S— #fiJffiW»F#5e#>e> 

Wmmmm^ aRa&^St, R£#A = KgfcF (g, a) MPt 

, £te3*lfcR£#B, XlC£r5V*X, H!F#X = B5KF (B, a) ©BBffiCDJ&Sitt 

(g, c) &tfBgF#Y=W»F (B, c) ££«Rf#C = KifcF (A, c) 
&tfH|p-&Y=H»:F (X, c) Bf#Z=08^H (a, Y, s) 

[0018] 

g«)fefi»g&fflV\ v = F (g, -s) &$9fc"T/<£-:£fattM»F#5£«>& 
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mm iz o v % t (die m ft & ftiE -r & n - if su© *b (D&ummmmm -f □ ^ ^ a 

»S,abfeJ:t;S«S4xfel«-^AJC»^V^-r, Bg^B=K2&F (g, b) hffip# 
X-ilF (A, b) MB, X&3Eg!#ffl3g*tCjaiteSi*\ tyfHSE 

re#ffliis«*^©«F#c=H»F (g, c) x.z$m^Y =mmF (b, C ) 
tr=.im^c=mmF (a, c > sotm^ Y=gai&F ex, c) m^z=m 

(a, Y, s) g#3*lfcmF#C, Y, Z^C»^V^T, 

Y = g§£fcF (C, b) Jkm^A = mmJ (v, Y, g, Z) ©2o©S^B 

is tc ^ l ^ ^ tc , mm&u&mmn t mmmm^mmm © mm &ie ^ t* & & 

[0019] 

te©U§J£te, liEW#fl!lSlfli©4i@Bevi:®IBfiis ^©K^JCOV^T^*) 
S&fcUffcg v = F (g, -s) &»fct-*£-:£ftffiW«F#j£«>e> 

SESSBtCfcVxT, ft8a££/£U**ol»#A=W»F (g, a) 

Bf#A$:^iE#ffl!i^sfcit«-re^M#^i:, m&ikummmmfrb <dv&^ b, 

B, a) ©W#©/fc5m&&SE-r<5&3S#«£, t9ffifiKSfrsiitft3ISnfc^S 
fC, aRcSSUl;^, &lF#C = Wi£F (g, c) 2&tfH«Y = BMKF (B, 
c) fc, *fcttl*#C=ISKF (A, c) &tfR&#Y = W»F (X, c) Hgp 
#Z=TOH (a, Y, s) SufEBf^C, Y, Z & 

[0 0 2 0] 

SAfefiRgSfflK v = f (g, -s) &»fc-r^-:#iRitew«F#j£tf>e> 

mm IC o v% T © IE 3 '[4 & ^SE "f -5 - iffgSE © * ©fcSE#flll£Sfi ffl © ^ - ifS 
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g, b) nm j %x=mmp (a, b) z&sbx. mm^B, xzmmmmmmiz 
mmtzmm^mt. mtmwmmmw.fr ^<Dm^c=mmF ( g , C ) s.&m 
^Y=mmF (b, c ) %r=.izm^c=mmF (a, C ) %.&m^Y=Mm 
f ex, c ) m^z=mmn (a, y, S ) ^ z&m-r &m^&m^®£. 

SMSftfcBT^C, Y, Z{CSo-^T, Pf^Y=g§^F (C, b) &tfBf-^A = 
(v, Y, g, Z) ©2oCDK«A«l3«rJCfiJt3iLfei:^tc, BufH^liE#f!l 

[0 0 2 1] 

[0 0 2 2] 

£<Dmmz^^x^&fe&fcmms*:mi<\ v = f ( g , - S ) 

mm t mummmmo m& tc o ^ % <dje urn & * ^ - if isse y * ^ a k & 

VMT, SL»a &£jRL**olfc#A = W8F (g, a) 3fc*bfcBf-S§- A £1£ 

Airgft &&umwmnm&mmmt:. sL«b&£jau i&#b=i»»f ( g 
, b) i:Bt#x=Bgi5cF (a, b) mm^B, xzummmmm^mm 
~rz>mummmmmmm^&tn. mmikmmmmmfr<b<Dm^B, xz^m-tz 
um&mmmm&m&mn. ^m^nr=.m^B, xjcs^t, m^x=MMF 
(b, a) vM&vm&nz&u^zuwmwmwm&u^mt.. mmi&iL-tz 
ttkuztifctgiz. aac &^b3b>o, m^c=mmF ( g , c > &tof^ 

Y=W|&F (B, c) fc, £fcl«#C = HffcF (A, c) &tfHg# Y =H» F 

(x, c) m^z=mmn < a , y, s > fc&^assE^w&MiMsi 
i«fHHt#c, y, zz&ummmmizmm-tzuwmmmmmm^m. 
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^m^mn. ^Y=mm.F cc, b) %.&m^A=mmj (v, y, g , z 

[0 0 2 3] 
tc^lgB^ £ mm L © X*& z> . 

[0 0 2 4] 

T, HWc n-iffg|iE(D7n h njizmft 2tiZ>Z.£ &S££3ft5 nrffif£#& 
[0 0 2 5] 

mVIZ, -?-*l^*UC;i3^T, A0» ( + ) til (*) (DH^XDmWifi&mZtlX 

-ttet>*>* &M<Da, biCgHLT, 

© F (g, a + b) =F (g, a) *F (g, b) 

®A = F (g, a) F (g, a * b) =F (A, b) 

, 1 ffl;*J0>W8tT?&<5. 

H ( a, Y, s ) = a + Y * s 
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o 

J (v, Y, g, Z) =F (v, Y) *F (g, Z) 
[0 0 2 6] 

(Dttmrnzamiz. mm p, q # q i p-i ©w#&^u g e z P # 

F(g, a)=g modp 
[0 0 2 7] 

CPUm< i:%^-tf=i>tfzL-^{cJ; *J*^StifciEW#^iSl 0, &fE 
[0 0 2 8] 

<lMA&3fctf>§lfc#SI#|C#l 8tCg&KS*lT^.5. 1 8 tt, *yh 

C — ^ 3 2 £:frLTffi©^tt£^f§-f £fc#>tC*y 3 2 fCgsM3 tlfcit 

f'f>^7i-7 (J^T, Sitei/FfcvO) 3 0 &C^M3*lTV%£ 0 iMi/ 
F3 0lCtt, &SE#2 0#gM£S*lTV^ o 3 2 0 U 1 6 

2&tfA#M^lC J: yftiHt*^a hn;i/5:tfi||it5«f2 4 tCgMBStlT 
V*S. SL«»£#2 2tt, SL»ctcgr5<nr£C, Yl:#«>SlffiS(|[»2 6 IC 
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izmm^tix^^o f&-%mn&2 6 % 2 8&, mmi/F3 oizmmzn 

Sfc^JC, ;*^D 1 6 fC&^M£*lTV\£ 0 
[0 0 2 9 ] 

tftx.T£»;, A*ifi4 2tiA^{c^CfcSL^Cb$:|g^-r^gLiS[|§*#l4 4&t>* 
4 6fcg88<5*lTV*S Q $Ltfc$B£f§4 4 tt, * ^ U 4 6 MCS^J 
<Bf#B, X&#»SI«#«»»4 8£&&Sft-0*S. «F#St»« 1 8 li, * 

v h 3 2 ^^Lxmommumm-t^r^^zmm i/F56 icg^^tir 

iifi! I/F5 6 &C *ME»5 Otf&JftStiTV^. ZLtf^liEfl 5 0 tt* 

4 6 Sjmffiznz^z* «SE«2ott, ^m^wc, ^ai^«5 2 

[0 0 3 0] . 

te®*fctE#fl!HBS 6 0 tt, _tfB^liE#««4 0 
«>, 3¥*Wfc3iW&4!m"*S. J^T©§fcBj!T-te. &iiE#«l*4 OS:^»ft«/S 

[0 0 3 1 ] 

#cJc, ^Jfe^^fflcD^D h^uiZMW-tZo litis* i/T.r&^^t-Zlzm 

»F g , ffit8#©4fcg&«W: v = F (g, -s) , gE9!#©jgjaftttts il-tS. 
[0 0 3 2] 

4JCj:oTSL»a &£«U Bgp#SI»« 1 8 Kl J: oT, A = F (g 
, a) 5:fffb, iifgl/F 3 0 LTI«#A &tfcSE#KiaMrr*. 
rcD^^lte, BIl©SEre#fl!ISIfil 0©«taP s 1, OTIPs 1®^ 

[0 0 3 3] 
^ -5=- -V 2 : ^fl#tt, 

SL«I8£#4 4JCJ:oTSL»b&£j«U ^MLfeBiP#A &fl§^T, B = F (g 
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, b) fcJ:tfX=F (A, b) £ftffU iif? I / F 3 0 LTPf # B , X£ 

[0 0 3 4] 
^ -5=- -V 3 : 

^fgbfcMB, XfcffiV^, tftSE«2 OJCJ:*;, X=F (B, a) tff&&?Z> 

4 fcj: *;^D hn;i/$:tft^T-rs o /&£^£&e>tf, SL»c&£/SU C = 

F (g, c) , RZ$Y = F (B, c) SrfW-rS. fcfc, r©ffjm, C = F ( 
A, c) , Y = F (X, c) T?fcJ:V^ Z = H (a, Y, s) -t/3tt>^> 

, Z=a+Y*s^IL ItHg^t'feSC, Y, Z &fc3iE#lC3Hg-r£. 

3©^f7y3n h i (Dum^mmn 1 o^iit 2 srfitfcMap s 

[0 0 3 5] 

MLfcB|p#C, Y, Zfcfl^T, tt3E«5 0lCj:y, Y = F (c, b) fcitf 
A=J (v, Y, g, Z) , -r<fc*5^A=F (v, Y) *F (g, Z) tfjfcft-t 

2tC*BSf S. 

[0 0 3 6] 

. &mW:iznfk~»smte7U v fcr-^-f 7.tn.-v h (fdu) &iilT, 7U 
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, CD-ROM, MD, MO, DVDf0f^HDAT^i^f-m 

, MOgf, DVDmm. D AT^tt^fcM^tWfcfcV^ 
[0 0 3 7] 

<&<*m> 

JlfrMT'te, 3R«p, q (fc£U q I P-1) fcfftRqCTGg&S/*^/^ 

HLfrtZlZ, WffcF HLX v = F (g, -s) =g" s mod p 
TV^„ f&t)*., tt«5jftli. _h«E©Schnorrh|SI^© : fo<Z)$:MVN€>^ 
£o MtH^LTH (a, Y, s) =a+Ys mod q fcfflV^ BBUSC J 

illTJ (v, Y, g, Z) =v Y g Z mod p?:fflV>T^S 0 
[0 0 3 8] 

^f^7^-M»p, q (fe£U q | P-1) fcfi»q©3Cg 
SEI$!#©4*I«I£: v = g" s mo d p 

mmma&mm : s e z q 

[0 0 3 9] 

a e Z q . . . (i) 

A=g modp •••(2) 
-T&*>13, M#{R!l^« 1 OX- it. a»84S14*«^f^5i-*qS: 
JB^T (1) 5£JC3£t5<SLar a ££;&-f£ 0 fit, l@-5&W3gl 8 fcfc, ^(Z)£L 
Ifca&tfS/^-rAA 0 ^* p, g£«^T (2) ^JC J: U Hf-^A fe*«bS e Z. 
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[0 0 4 0] 

b e Z q - - • (3) 

B = g modp •••(4) 
X = A b modp • • • ( 5) 

^H#f!flStt4 OT'li, if I/F 5 6 £^LTB£^t3l#§4 8 IC 
II^#M£Sl 0fr£<DHf^A^;d£;tx£ o r©tg, 4 0 

, aj$t#§£3§4 4#S/*7 : -A^*-# q fcfl^T (3) 5£lc«^ < SUfc b 

B£#iHI2§4 8 te. ^©SL^b^^ML^^-^A^MVNT (4) , ( 
5) j%iZ& *JRg#B tHf-ifX ^ CD^4?)7tH^# B , X liSlfif I/F 5 6 

(Cffi^j$ti> *y h>7-* 3 2 £^LTlIfE#{IH!£*l 0 3 *i <5 . 
[0 0 4 1] 

Xf*^3 : |EH^#li, It-^B, X&MW 7&<Z> (6) 7%tfm±ft Z> b 



X=B a modp • • • (6) 

c 6E Z q • - • (7) 

C= g C modp • • • (8) 

Y = B C modp • • • (9) 

^f:liC = A C mod p ••• (10) 

Y = X c modp •••(11) 

Z = a+ Ysmodq •••(12) 



i 6izmmisfr*sxTr2*rt^*-*zm^TJim (6) ^(c^otbip-^b, 

18 ajll#2 0 0 0 - 3 0 7 4 7 6 7 
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, ^2 0 1i, £Ufc3S£#f2 2Affffi^LT, SU&3g£#g4 4 IC£ V*T 

qfCgcKSJfcc ££J&£1±3 0 ^©SU&ctt, Bt#^#|2 6 

p, g£JB^T_hlB (8) , (9)Sifett(10), ( 1 1 ) (C 
flEoTBf-^Ci: YS:*«)6 0 ?^fc, #«>&Hgr#Y, f§L» a , s , 

/^*-#q£M^T (12) &C*£o TBg-^Z &^§„ 3 tl £ffgf#C, 
Y, Zliitmi/F 3 0tCffi;fc3*U *y hO-* 3 2 &frUTtfe§E#0»SS4 
0/\££f§£*l£o 

[0 0 4 2] 

X^y^4 : tft5E#8\ (12), (13) ^tf/ftfi'T Sfr&fcjfc U M# 

Y = C b modp • • • (1.3) 

Y Z 

A = v g modp •••(14) 

"Tfcfc^ 4 Ot*H ii#I/F 5 6 &^-LTttSE»5 OJCSEW 

#<HI=g«l Ofr&©l©#C, Y/ ZtfAlfrStlS. "I&SESI5 0l±, B£#C, Y, 
ZTO^'J 4 6lCiB«L£^X^AA°r7*-#£M^Ti:fE (13) ( 
1 4) :£tCt£oTHiF-ff C, Y, Zfc&fiE-fSo 

«SE»5 0tt, (1 2) , (1 3) l&mmiL<DlkMm$kT*&2>m-&\Z\$. # 

[0 0 4 3] 

> aifeT 1 B^KIUgF-tAJC I p I , jlfgT 2B#&CBf#B, X{C<J:S 2 | p | , 
ilffT 3B£fCBt#C, Y, ZlCfcS 2 | p | £ | q | T*&£ (01#JR) . Z.<D 

tLth. 5 | p | + | q | 0)t>1ffrtemmAT*J:^z£.iztez> o tfc ftHMlco 
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[0 04 4] 

T3 ©W<Dra;ft©Sfe:|KJK , T?&oT*K -£(£>i£ft»tf>Bjt#A, B, c 

, x, y, zfr%mm?^%mmmt>m&2ftz£t^$Mffizft2>z£i l *te<. 

[0 0 4 5] 

% J: v^„ 

[0 0 4 6] 

&V^£&, t-T*lc£fl£>;ftT V*<5> (C. Dwork, M. Naor and A. Shai, "Concurre 
nt Zero-Knowledge, " Proc. Of 30th ST0C, 1998) „ 
[0 0 4 7] 

&mm*y hy-9T*\*&&a>mtt't&*iEtjimum (vi, V2, • • •, 
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vn) &±figB#{c, um^p t.mm-tz>z.£tf*jffiT*2bz>o tot, ummptm 
m<Dfeu% (vi, V2, • • vn) £(Dm(Dmm<nm%im&z^z-z><&m 

[0 0 4 8] 

-£dT% *ttfET?tt, ^Ifc<Z>Mf£Lfc*lEfc&fiE# (VI, V2, • • • , V 

n) j^jise-rs^n hn;wct£^ii^#p £:®mt-£^£fcj:oT#£3£;tf-e 

ftlftlCte, tt^©^iE^^ii# (VI, V 2, • • Vn) (C*fbT, $>S7 

(vi, V2, • • vn) (Dmrn^m^mm^n-m^^^t^-t. z. 

r-z?ti, rT;i/^UXASt«iS<Z)SEW#Pi:«fE# (vi, V2, • • •, v 

[0 0 4 9] 

-JKtt&*3 d£&<, ^IE&&II# (VI, V2, • • •, Vn) [ifgftb 
, ^T<2£e>&clEBJ3#P £^iT££J©5tUT <fcv^ (VI, V 2, • • 

•, Vn) &8fciBE#(Gl, G2, • • • , Gm) iZtf)l-7frtf-tZ> (m< = 

n) . e^suicti, ? )i - Giizm-tz tni--7G i _ 1 izm-t2>%iu 

[0 0 5 0] 

A^J$:iiE^#P(D^^i3J:t>*i/X^A/\ 0 ^^-^ (p, q, g, v) iitS. 
[0 0 5 1 ] 

Xt^V^I : HEHJ!# P te, Rf#Al = g al , A2 = g a2 , • • •, A n = g an 
mod p£StHU Hfip-& (Al, A 2, • • An) ^4x^*1, tkUM 

(v i , v 2, • • • , v n) izmm-tZo 

i<OI$j&^«3E###Sfit#tt, VIEW Q = { (p, q, g, v) , (Al 
, A 2, • • • , An)} t'S)5 0 
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[0 0 5 2] 

^f'>^2 - 1 - P : G 1 {CM-t"5-r^T£>&IiE#V i tt, gfeLfc'fl&# (A 1 
, A2, • • An) frb. gL»b i £Z q &4^U fl&#Bi (=g bi mo 
d p) jJ3<J:tfBj£#X i ( = Ai bi mod p) fcftHU #^>4x^Bf# (B i 

, xi) zmmpicmmtZo 

[0 0 5 3] 

- 1— V : ViGGi Sr^^-T#i tCO^T, 3£I5!#P ttfcSEjS (X 
i=B ai mod p) #J&U£o#vg;fr£l£iiE-r3 0 

%lj£Ua£t&, ^se#v i ic, (c i, y i, z i) zmm-t 
z<Dm&x% %LU%t>mz>mmiz> view^viewq u { (bi, xi 

, Ci, Yi, Zi) I V i GG 1 } T*2bZ> 0 
[0 0 5 4] 

#ac, 2<= k<= ntC*f IT> ^^^^"2-k-P, 2 - k - V £$i U b 
[0 0 5 5] 

X'ry^Z - k - P : G k ICMf £-r^T<Z>1£IiE#V i t£> T*tC#£'ff # 

V I EW H ^^ SUfcb i (GZ q) , ££/&U Bf#B i (= g bl mo d 
P) JkZfm^X i ( = A i bi mod p) fcitJtU (B i , X i 

) zmw^pizmm-fz* 

[0 0 5 6] 

Xf>^2 - k - V : V i GGk £$i£-r# i JCo^T, IE8J!# P kM^IEiS (X 
i=B ai mod p) *^U5Xo^S^$:MiiEt- 
t>Lj£>j3£Ttf. ^|E#V i iC, B£-J§- (C i, Y i, Z i) ^itM-tSo 

z&m&r*. tftu^tfimzmmi*. viEw k =viEw H u ( (Bi, x 

i, Ci, Yi, Zi) | Vi GGk} T*&£ 0 
[0 0 5 7] 

u _h <d z h mm m iz mm -r & ^se# & mm. & 

V I EWn= { (p, q, g, v) , 

(A 1 , A 2, • • • , An) , 
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(B 1 , B 2 , 



B n) , 



(XI, X 2 , 



Xn) , 



(CI, C 2, 



Cn) , 



(Y 1 , Y 2, 



Yn) , 



(Z 1 , Z 2, 



Zn) } 



[0 0 5 8] 
Cfgft tc it * #f««HE£) 
JiSa^r-y^ 2 - k - VICfcvxT, #i&C*fLT, 
Xi=B ai mod p 

^yfiofeftJCtt, fc3I#V i ttfa b i <E Zq^ot, 

B i = g bl mod p feW Xi=Ai bl mod p 

[0 0 5 9] 
[b-awareness assumption : JgJTB A A] 
ft*©*SfVilC^bt, ±1B*-5 i V^2 - 1 -V, 2-2 -V, • • •, 
2 - n - VlCfcV^T, (B i , X i ) <Z)H£ttT* ttfc < , Uffl. b i ©Mfeffi 

^JlTSJ:?^ M©ftffifVi' *«#4t6i:t5. 
[0 0 6 0] 

StM!"*"* 5. 2/^ a. U-* SfcMfcfE# (VI* , V2* , • • 

Vn' ) ZV^JV-^y £ LXmm-t&o £*ltCfc»J, Stt#SL» 
b i ©H&fllM-f #6. 
[0 0 6 1 ] 

A:fc:4*BB8lv, S/^-r ;* - # p , q, g 

: V I EW„= { (p, q, g, v) , 
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(A 1 , A 2 
(B 1 , B 2 
(XI, X 2 
(CI, C 2 
(Y 1 , Y 2 
(Zl, Z 2 



An) 
B n) 
Xn) 
C n) 
Y n) 
Z n) } 



[0 0 6 2] 

Xf'^l :£T<Z>i (K=i<=n) ICoVnT, SLIfcY i 



e Z q &£/£U A i =V Yi g Zi £ftH-f 3„ C 
View Q =[(p, q, g, v), (A 1 , A2, 



Z q , Z i 



• •• • , An)] 



*-ry^2 - 1 - P : G 1 tCMf-S-f ^Ttf>^iI#V i (V i ' ) fe^ff^S. 

#V i ICV I EWq&AAL, (Bi, Xi, bi) &#f 
ItS. Bi = g bi mod p^USto. 

Xf«y^2- 1-V: Yi=Ci bi mod p fciftfe-rc i 5:|fItS„ 3® 
B£*T', S/S a I/-* S#S/5 a. U- h UfcfiMRtt, VIEWp 
VIEW 0 U {(Bi, Xi, Ci, Yi, Zi) | ViGG 
1} T'feS. 
[0 0 6 3] 

2<= k<=nfC#fLT, ^f'y^2-k-P, 2 - k - V »j ^"To 
[0 0 6 4] 

Xf>y^2-k-P : GklCM-r^-r^T©^$E#V i (V i * ) Sr^ff^*. 

o£ y, #V i tCV I EWj^SrAiJU (Bi, Xi, bi) £ 

ItftS. Bi=g bi mod p#J5fc*J5£'O 0 

bi 



7."rv7l- k-V:Yi=Ci UI mod p 5:ifctC i feiflf-f S„ Z(D 
B£*T% S tfS/^a. I/- h Lfcfiiatt, V I EW k = V I EW k _ 1 
U { (Bi, Xi, Ci, Yi, Zi) | V i GG k } T'&6 
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[0 0 6 5] 

mmmiziy^^u- hztizmmftmv i Ew n «, mmouw^pt (vi 
, V2, • • •, vn) <Dmmmm(Dm±Lfti$£.-'%ctz>. tot **&§fs<f4# 

[0 0 6 6] 

#ic ^>z-*v h&i£(D#mffl*v bv-vzftLT, mm&mmmtfm 
[si] 

[02] 

□ y ^0T*&£ O 
[03] 

[04] 

[0 5] 

[fT^M] 

l 0 M#{8!j£tt 

1 2 Atimm 
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[0 2] 
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12 



ilfia 



20 
Fia 



o| ^ -18 
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[0 3] 



&EH# (v. s) 




Pf Qt 8 P, Q, g 


( aezq ) 
A=g a nod p 












Ub*>Jt& 

(bezq) 


c=a+bs nod q 


4 " — 






f -> 


k r 

A-v g mod p 

r 



[04] 




3 
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m 



Icn-iffgiEfSo 

[mVk^m ^nhnM^f^K', SEW#l0t±, §Lf£ a tc J: £ A = F 
(g, a) fcftllLT&SE^catfgt-S (ffilPsl, l^Tl) . ^f7^2 
T% ^SE#4 0li, gURb{Cj:<&ll&#B = F (g, b), X=F (A, b) £gf 

x=F (B, a) tfjfcittt&tftSU #f&j£&«M£^n Kn;i/«:#»rU 
bti, SURc fC iSC= F (g, c) % Y = F (B, c) &!tllfe^ Z = H 
(a, Y, s) ^IflU feUmizmm-fZ («Ps2, SfT 3 ) „ 

tfeSE#«:, Y = F (C, b) £<fctfA=J (v, Y, g, Z) tf/Sfitt 

"TS (MQ s 2) „ 
Bl 1 



1 



tf}3E# 2000-3074767 



#2000—09986 7 



#M 2000-099867 
50000412658 

mm &m 2319 

12^ 5/1310 



[aftbfettftiA] 

[IftLfetftSA] 



390009531 

7^'J*MB1 0 5 0 4, -a-H-^ffl y 
100086243 

w^;i[»*#nrFtsii3 1 6 2 3 $j& i 4 H^r 

100091568 

n&)\\m*mwTmmi 6 2 3tti 4 b^t 

^ If A 
100079049 

*J5CSBfffil*§T?&4 TS 3#1 m HKgrfi^ 

Kim *mmm<&ftmmm 

100084995 

B*rit 4 ts 3#i m HK#r?gt? 

100085279 
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ffi I A 



(3 9 0 0 0 9 5 3 1) 
1 . ^M^E B 1 9 9 0^10^240 

ft ffi 7^'JA#*iio 5 0 4,'-a-a-^ffl y-^yv ( 
y 

2. ^H¥/!H 2 0 0 0^ 5H16B 

ft m 7^'J*^*E1 0 5 0 4, —=L-3.->7'm T-^yt ( 

y 
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